# authentication
acl_file /etc/mosquitto/acl.conf
password_file /etc/mosquitto/passwd
allow_anonymous false

# listen to mqtt
listener 1883
protocol mqtt

# listen to mqtt over websockets
listener 8883
protocol websockets

# tls options
certfile {{ tls_certs }}/{{ inventory_hostname }}.crt
keyfile {{ tls_private }}/{{ inventory_hostname }}.key
cafile {{ tls_certs }}/ca.crt